This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json) Hash identifier: MfGbrNJjG9tSEzDyipe6vUsu5qH5ps5OQ9plELj4ajs= Subject key identifier: DB:2D:15:CA:D0:3E:84:E9:5C:23:9D:E2:A6:2F:F1:62:3C:F1:E2:DF Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2 Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2 Certificate serial: 019C1BDE81A80E8C263983ADF6CCDD04F6BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft Manifest number: 3B Signing time: Mon 02 Feb 2026 01:01:32 +0000 Manifest this update: Mon 02 Feb 2026 01:01:32 +0000 Manifest next update: Tue 03 Feb 2026 01:01:32 +0000 Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=) 2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: anhBPR+TsmJ7NfczPwjCkGHVqBa/lJ6Vact6PpxPWF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:81:a8:0e:8c:26:39:83:ad:f6:cc:dd:04:f6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2 Validity Not Before: Feb 2 01:01:32 2026 GMT Not After : Feb 3 01:01:32 2026 GMT Subject: CN=db2d15cad03e84e95c239de2a62ff1623cf1e2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:d2:fa:6d:cd:a1:40:da:cb:ff:18:a1:2a: 40:da:fd:f3:3c:85:74:ea:ae:91:2a:55:fa:55:16: 50:33:cb:3f:6f:a7:58:d3:54:b3:ef:d9:7e:e7:c1: 9a:2f:4a:c9:20:ef:6b:b4:be:a5:51:e0:8c:1e:02: 7b:f1:e5:f5:2f:7b:f0:ee:ba:2a:77:73:06:95:76: d6:e9:80:6c:b5:d5:70:e9:76:92:a2:e3:75:4c:d3: dc:05:a9:58:17:80:68:25:aa:cd:6c:aa:93:af:f0: b4:ca:e3:fc:fd:e2:a7:c4:37:5b:13:15:e1:35:eb: 93:00:f1:63:f2:e3:bd:2a:36:d3:63:cd:a2:69:06: a5:dd:53:52:50:84:f7:5d:78:2c:77:7f:1a:51:13: 32:01:7a:ab:ff:57:0f:8d:db:05:a6:17:f1:b6:c1: 4e:9c:e3:cb:b4:6c:34:0a:23:8e:ec:72:e2:0f:d1: 32:fd:6c:4e:fa:c4:c9:bd:06:d9:11:21:95:85:31: a9:16:78:06:2b:39:45:f3:37:dc:a9:fe:07:ff:4d: 52:52:bf:6a:c8:36:4c:f2:c9:20:53:52:d0:1a:2b: ca:29:cf:01:8d:ec:7e:80:04:27:7c:dc:5b:46:f6: af:b6:d1:ba:14:96:72:53:57:68:54:ef:0a:e4:fe: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2D:15:CA:D0:3E:84:E9:5C:23:9D:E2:A6:2F:F1:62:3C:F1:E2:DF X509v3 Authority Key Identifier: keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:28:ed:ac:49:b8:d3:e9:af:e8:1d:a5:b6:81:cd:a9:91: bd:db:db:ad:90:3f:18:44:94:05:56:ab:15:78:a4:64:03:a4: 72:4a:b6:6d:2b:9d:9c:c2:0c:7e:06:cf:ed:69:5b:17:ab:c0: ed:ee:d7:20:92:3d:71:5e:d2:a2:f8:52:c2:79:96:93:38:59: 23:81:21:ad:ad:b0:58:e9:de:c9:52:ef:8d:42:7b:72:e1:bd: aa:a6:f3:e3:04:0a:d2:60:4b:63:ee:37:e4:a1:db:6b:97:f1: a7:72:aa:ac:1a:39:b8:c1:c4:da:bd:48:4e:c6:87:b6:96:38: ab:62:22:bf:7c:b6:37:2f:1f:a1:bd:99:26:fd:87:92:23:84: 88:8e:dd:7d:af:3e:ec:fc:8f:7b:0a:54:01:a2:3c:4d:7b:7d: be:4d:a0:21:ed:b6:34:b9:4f:3c:18:e5:36:83:4a:99:1b:b2: be:60:2b:e8:30:c9:82:69:66:84:59:31:5e:4d:63:5e:92:99: 62:a0:2e:e7:27:bd:4a:b3:e7:e8:86:8e:7a:55:0d:a6:9c:75: 14:22:f3:c0:f0:2f:23:b5:1b:6a:ae:38:90:92:68:3f:9b:f0: 2e:8e:1b:e1:c6:0b:a4:e1:49:13:e0:27:51:21:02:8c:3d:45: 32:c9:90:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3oGoDowmOYOt9szdBPa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODYyZTY1ZTkzZDg4NWM0Zjk3NDQ5YmNhZWJhYmMzNTFk ZTY3ZDIwHhcNMjYwMjAyMDEwMTMyWhcNMjYwMjAzMDEwMTMyWjAzMTEwLwYDVQQD EyhkYjJkMTVjYWQwM2U4NGU5NWMyMzlkZTJhNjJmZjE2MjNjZjFlMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ3S+m3NoUDay/8YoSpA2v3zPIV0 6q6RKlX6VRZQM8s/b6dY01Sz79l+58GaL0rJIO9rtL6lUeCMHgJ78eX1L3vw7roq d3MGlXbW6YBstdVw6XaSouN1TNPcBalYF4BoJarNbKqTr/C0yuP8/eKnxDdbExXh NeuTAPFj8uO9KjbTY82iaQal3VNSUIT3XXgsd38aURMyAXqr/1cPjdsFphfxtsFO nOPLtGw0CiOO7HLiD9Ey/WxO+sTJvQbZESGVhTGpFngGKzlF8zfcqf4H/01SUr9q yDZM8skgU1LQGivKKc8Bjex+gAQnfNxbRvavttG6FJZyU1doVO8K5P5MvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNstFcrQPoTpXCOd4qYv8WI88eLfMB8GA1UdIwQY MBaAFE2GLmXpPYhcT5dEm8rrq8NR3mfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlZdVplazlpRnhQbDBTYnl1dXJ3MUhlWjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85YjFlZDMtZmVjZC00ZGU2LWJjMWEt ODgzOGE4MjgyOWY5LzEvVFlZdVplazlpRnhQbDBTYnl1dXJ3MUhlWjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85YjFlZDMtZmVjZC00ZGU2LWJjMWEtODgzOGE4MjgyOWY5 LzEvVFlZdVplazlpRnhQbDBTYnl1dXJ3MUhlWjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/co7axJ uNPpr+gdpbaBzamRvdvbrZA/GESUBVarFXikZAOkckq2bSudnMIMfgbP7WlbF6vA 7e7XIJI9cV7SovhSwnmWkzhZI4Ehra2wWOneyVLvjUJ7cuG9qqbz4wQK0mBLY+43 5KHba5fxp3KqrBo5uMHE2r1ITsaHtpY4q2Iiv3y2Ny8fob2ZJv2HkiOEiI7dfa8+ 7PyPewpUAaI8TXt9vk2gIe22NLlPPBjlNoNKmRuyvmAr6DDJgmlmhFkxXk1jXpKZ YqAu5ye9SrPn6IaOelUNppx1FCLzwPAvI7Ubaq44kJJoP5vwLo4b4cYLpOFJE+An USECjD1FMsmQVQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:03:05 2026 by rpki-client